List who can grant you a permission.
ANY valid key may call this — it is the one authenticated endpoint that
requires no particular permission, deliberately, because the caller who needs
it is by definition the one who lacks access. Only active members of the
calling organization holding users:update are listed, at most 50 of them,
and emails are the only field returned.
Authorizations
A scoped AgentEye API key. Mint one in the dashboard under Settings → API keys, or with POST /v1/keys. Each endpoint names the permission it requires; a key without it gets 403 and a required_permission field naming what was missing.
Response
Up to 50 { email } objects: who can widen your permissions.

